Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
File:                     df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json)
Hash identifier:          sPeUi5iFHfrU5vH9uGdsrhrbwdOvYa3MGiuRdOl6U8M=
Subject key identifier:   C5:41:CD:C4:AF:60:7F:FD:AD:93:86:60:18:35:D8:0D:51:74:C3:B8
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F4328584FA1633244F8EF7CE63BA7C200
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     53454
IP address blocks:        104.225.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:32:44:f8:ef:7c:e6:3b:a7:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=54e5e793-cd99-4342-9687-4ff572775754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:37:8e:74:d0:ab:81:f7:16:de:3b:db:61:
                    71:8d:2e:2c:1a:1c:28:3c:79:a2:5a:e1:64:eb:31:
                    6e:be:5c:00:0f:46:27:a6:cb:cb:75:93:3e:78:16:
                    47:2e:13:f4:d4:62:44:e6:9f:89:c8:ac:22:04:1b:
                    df:e1:87:70:b8:c5:6e:bb:d0:0c:3f:e4:fa:85:6b:
                    f3:c3:a2:55:b9:4b:43:a0:17:66:cc:9f:b0:d0:b5:
                    f3:c4:f4:19:4d:bf:41:c1:73:0a:b1:2c:fa:f4:2f:
                    bb:7c:16:8e:fe:ae:92:26:ed:7a:2c:7b:d9:5b:b1:
                    af:5a:07:0c:f5:b4:c9:49:1e:d0:5c:cf:99:fd:61:
                    ca:51:07:cb:ef:f4:e3:bd:16:76:09:17:3c:80:51:
                    f5:1a:ba:e8:d3:e6:e6:71:91:f5:ed:9f:ec:4b:88:
                    d3:e0:24:58:f6:9a:66:56:4e:71:b8:77:54:4e:d9:
                    eb:c8:88:0f:fe:16:80:b6:0d:31:04:2b:f4:3b:ef:
                    d9:c0:f5:01:39:42:ee:72:42:19:85:3f:02:97:d3:
                    6a:ec:42:af:4a:d9:56:b1:86:16:3a:4e:b0:ba:2b:
                    5e:7a:2a:3e:05:eb:59:63:21:4c:96:ff:5a:0b:ac:
                    6a:82:25:27:7b:cd:ad:de:b0:eb:08:70:a0:f8:5b:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:41:CD:C4:AF:60:7F:FD:AD:93:86:60:18:35:D8:0D:51:74:C3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:45:f4:9c:b0:d0:f8:94:9a:91:76:80:56:3e:b8:1e:9d:
         3c:50:75:46:c9:d4:45:23:72:3c:ae:7c:d0:7c:5b:5d:9c:b4:
         e5:f7:43:4e:6e:61:97:c6:6b:17:73:0c:56:bc:6f:85:e6:1e:
         ce:93:57:ba:b9:10:78:d7:3d:c1:5a:ef:02:38:72:44:26:f7:
         4a:29:e3:ba:d0:8b:74:f4:cf:68:49:a9:c5:f1:8e:02:38:49:
         2a:f1:41:16:2a:25:a2:6d:06:f1:f9:c7:ba:e2:6b:ff:5f:b6:
         3e:f8:2c:cb:db:ea:49:66:55:9e:9f:b3:cd:1d:3c:92:d3:34:
         b1:dd:11:63:43:19:5d:b2:46:80:51:5c:b5:fd:26:c2:07:3f:
         7b:bf:e5:1f:4a:ff:37:52:62:fd:ff:72:a1:08:44:d4:d3:2d:
         59:8d:d9:7d:82:3a:cc:fd:b6:86:b3:8d:63:26:83:f8:18:89:
         58:b4:fa:16:5a:b3:e9:b2:8b:b1:83:0d:78:bb:10:8e:d3:39:
         ac:e3:64:af:2c:7c:db:76:04:5a:57:77:9b:23:79:a8:a5:33:
         c9:25:86:ef:d6:0c:c2:fd:06:7a:12:11:43:91:53:99:d2:d3:
         49:d3:ed:0a:19:ca:d5:08:27:63:41:e1:e4:e7:1f:2b:73:df:
         e7:81:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:31:51 2026 by rpki-client